4.10.0-rc.2

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.10.0-rc.2-x86_64

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-origin-installer-e2e-aws-upgrade
- upgrade-minor Succeeded release-openshift-origin-installer-e2e-aws-upgrade
Informing jobs
- aws-sdn-upgrade-4.10-micro Succeeded periodic-ci-openshift-release-master-nightly-4.10-e2e-aws-upgrade
- aws-serial Succeeded periodic-ci-openshift-release-master-nightly-4.10-e2e-aws-serial
- gcp-ovn-upgrade-4.10-minor Succeeded periodic-ci-openshift-release-master-ci-4.10-upgrade-from-stable-4.9-e2e-gcp-ovn-upgrade

Upgrades from:

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.10.0-fc.1

Created: 2022-02-11 21:06:58 +0000 UTC

Image Digest: sha256:da16f451dddad3ca26ecd7c5c16423fb3658d7883dadc108977675edf80c696a

Release 4.10.0-rc.2 was created from registry.ci.openshift.org/ocp/release:4.10.0-0.nightly-2022-02-11-123954

Components

Kubernetes upgraded from 1.23.0 to 1.23.3
Red Hat Enterprise Linux CoreOS upgraded from 410.84.202201122058-0 to 410.84.202202110840-0 (diff)

New images

alibaba-cloud-controller-manager git db2d118a sha256:795abf65ccd33f6eda8f91f8269c6f22236b73aa0a4b6cc1c391a202a822c81b
cluster-capi-controllers git 78fff559 sha256:7de58d91ccf66e8f4d475734cef1872532c5fc9d4a9a24e52d2c280445920f75
openstack-machine-api-provider git 2401f74d sha256:2aad03dc3c9685498d3496a5594cf88c0e1a4b6582889b1ec266d414f7410955

Removed images

cluster-api

Rebuilt images without code change

aws-cloud-controller-manager git d85867fe sha256:7b40d5a4e6d9c629fd69ed8b85e064620d7aca137d75e7c92b0033ec31045326
aws-pod-identity-webhook git 7f9eb87a sha256:dc958cc8d072f60cfc0236300ad2727eedbd805422c7a0139c6b9487f967df90
azure-cloud-controller-manager git 07f13351 sha256:6fd144e7bac467167b7013da1449102405b6368714a68ab54ff1b264835338e8
azure-cloud-node-manager git 07f13351 sha256:307e73c78357f70e7f617b77579d6bd666a1c4b89839d812f5e88891aba6e96e
azure-disk-csi-driver git 3d79d39e sha256:13ccc8737078190e911174ce7b5e66416ebf2b02ec207d1d19bc478401714cad
azure-file-csi-driver git f88155b4 sha256:10f7803c8d355802e866f5d848b4a6e1265c63be353203368086937c183f8ef9
baremetal-machine-controllers git 0716ee4c sha256:42124fa8ddb00abd51400728ddd6e9308574f1c0a1940e7d12f38e6ec95b10b6
baremetal-runtimecfg git edc9617a sha256:784cb6796adc967dad4027bd060d9546291af2b2dc7de1dbd3cacb3b07636b36
cluster-autoscaler-operator git a09e626e sha256:434395668ad3288418c6d219ef0a2a86a022bbd2fa520f8ee712c25920109e21
cluster-bootstrap git f22d1c60 sha256:8bc5e984fa97d82f3c0c04d8c9d32a08b1fd7a192c16457735bacc10799f10e3
cluster-capi-operator git 79c0ce3a sha256:ca2e1473fab42617610a89219700e0c1e2df6b2ee931233bb5e272b6008e10c2
cluster-kube-storage-version-migrator-operator git 9030c0dc sha256:cb4d20675fa7e58a3ce3b04e59987a3b1f5fda99858e11ed1da823cc584c3822
cluster-node-tuning-operator git 3c5760e9 sha256:73ae9732ab372a178207b1886cbbd98bd187910cc1d08132702c89cb9fad823c
cluster-policy-controller git 8e5b3651 sha256:4c0dd562ffb0f3906fbeeb80943cc1e5c2fd9e0e292d8691422b923808551d78
cluster-update-keys git 342eb8e2 sha256:6f80987c71fd4ed8259d6850890d1b9e2e35716a43808daa8d6bb51e9e534618
configmap-reloader git 22a40ce7 sha256:e38d8b41170a383cace07ec33a0d83097f4f07b6b44a01239228f7caf70f46f2
csi-driver-nfs git 3448830c sha256:d540d2aba995828ce7e11e12d73dc1b433732a121a4d8f9bc9b72a8b87b208fb
csi-driver-shared-resource-operator git 662615b3 sha256:21a1b02beb473fef68de156eb044faa4fe5c45bcca2f77022afd23b4d550831a
csi-livenessprobe git 8c1a5bca sha256:ec3041aa028dc3a2696a10320f61485204f86e9841e4fe84c7db4effeaea4cdd
csi-node-driver-registrar git bb0bd823 sha256:30934691f205529464aa2f0c7c4b462fdf6da7062a814f63f1096aaae467d951
docker-registry git 02e84c00 sha256:552d92e9d2241ce4f1c0178321b1c6f892e37943615d8c876abdc8c1aea39c6f
driver-toolkit git 0c77c8d6 sha256:3f1272ac54ad86a0395df06f17d8b903fcab04efed94a4a7c329d8577295fe1b
etcd git 7bbf25ae sha256:b10a98900c087a762c185db4c94c6b2c40ba6ef35995a8997e4b89d557ae2819
gcp-machine-controllers git 3fe46c8b sha256:f775970ad7012ac2ecd98a044d0fac48152fc2d8b68fec4614e2dc99872ac5f1
gcp-pd-csi-driver git 19e9a57f sha256:777cf15051e0ad7d15e57dae108a9429c8118c5341721079970d8a5eb16d24fd
ibm-cloud-controller-manager git e3039120 sha256:48b571beec9b989aba6b48fbb962c11d7c61bb6fae475a0cb74bed92d6228a91
ibm-vpc-block-csi-driver git d54e3706 sha256:3401ce82877c0c93bfda09f81ea9cab28e63443393086d4e153753da96e2eabc
ibm-vpc-node-label-updater git 7074dfc3 sha256:50ed88d9be72f79b198a9f637eef9ce9a082dd1ddc62924f5f4ceafe239f7ac4
ironic-hardware-inventory-recorder git 62469223 sha256:c44fa35c3e6712697ddedde0a3c050809c784f378008b83bce0d55f531481ef5
ironic-machine-os-downloader git 81fe2974 sha256:af232c775657319338eac882c14207980c5af3f6000e04a919b938a30bee4f1e
ironic-static-ip-manager git 45a1c542 sha256:4cdfbab94e30b347f9d78773aba60166f8ab3f2f8a9d7acd22070996a6115503
k8s-prometheus-adapter git 4052b317 sha256:111aaa76fdb91fe17180796055339686194e668352bbd336220b1760b9258f5d
keepalived-ipfailover git 544601e8 sha256:583ad6496ea45a4dce4165b2dac5c648055efd85d20645b14d2d748c985d4b99
kube-rbac-proxy git 4f198b2b sha256:1b00704b17c3df6cadc20a9b55f6ac80ee644bee46da1be553851acf2163afc8
kube-state-metrics git 6530ff5a sha256:e6fe3183630483a81f307bcd4a9628475c882e13e9035bdad93337b0943aea30
kube-storage-version-migrator git 901a6d22 sha256:3a2a3fc157a613071283a69a63cc2c30bd5003aa4055ab3f88eee387544db049
kuryr-cni git e77f917b sha256:dce5e6292b4589ae4a95b94b6e60f27c060046a60fe2795ed2792f1211160151
kuryr-controller git e77f917b sha256:f2bb121ce79e19a467741f25bfdcaa7466ac7f077191b0d6fd162b2748291bd8
libvirt-machine-controllers git 3b330b72 sha256:7b22b96eb0a1dd6ac144fb2131a8f38507db9d2c9b0dc2b9766bb3a1c117462f
machine-os-content sha256:1b5db764a79066c90a06f05efe2bc69ab974391edffbfe155f01996c133a848c
machine-os-images git 4d1e087e sha256:0e807a153beedb8624b63a8f5e5bc978f99dac0ee263a417e420b7ae602fb3d1
multus-admission-controller git c662bc21 sha256:5f79bb7fec8fceeb076110fcad209e7886dccae84979f40e9135439665d0cadd
multus-cni git d27ed81c sha256:b336b3836cde77bfee8636f451ecbcecf12af482e56ac6c795d60b2fafc32d4e
multus-networkpolicy git bfcc6c85 sha256:85382b25c13707d0346fbcf132f0823c5c29be5babc5b4ee8ed8a450ec6b030c
multus-route-override-cni git 707dd380 sha256:9b9e7f4c7b9ee21d85e8cf0904ee65939709143a711cd47b687b08ee7e0a6bfe
network-metrics-daemon git ab62184d sha256:6807be673623d04b4f23b1842dfba5a2751ad3d5bd1efaa7df4c3d8d1f79a9e5
network-tools git bcfec9c5 sha256:ae3a3106a2c2cf052aad89a5ae1bd91a2d2f94fea0eb99afc78d810a008f2fc1
oauth-server git 245b95f8 sha256:956766bcc90531bf61bb9a8a6d540c688efc23bb8aef24acaedbe389143c6809
openshift-controller-manager git 2c2d50db sha256:a70dbb9b337c77a9947374234bcc70026d7cc3faed57895ad64116ef12d032cf
openshift-state-metrics git 2dcf5230 sha256:1ba0e0bedbbb4430b583621a47c49b3ae06945bb33f88ac9e6ff183c4d84f36f
openstack-machine-controllers git e6b35eb4 sha256:902680ba06f2a4c87b76452b6260e178c1ee6dab104d8fa22ecaff4bdbdc35cf
ovirt-machine-controllers git 35ce9aaf sha256:4de887882dd0468494071a5b47496ed95c1ff22dcd2c2621f3329e184ef13ce8
prom-label-proxy git 5f4c8992 sha256:f0d2570463bdd187195b99462de0228601f5cd1ddf39d511b50e499497720624
prometheus git 3c6cd55e sha256:0d08f9eade38f3d77427baa7f75636be84435b31455f89c7c8450f97553259b5
prometheus-alertmanager git 01339596 sha256:76e2f05f131bebc441c103cac9d27cd4a494245c1eabdd6b3e7f1d43d0f7fa0c
prometheus-node-exporter git 0eed3102 sha256:2f5897ba42824596098e3552cc60d9dfe941f52ce65077cec57114115c17048c
service-ca-operator git 1611373e sha256:31513f05057f5955801923ad76d502bcdd9c5fd344b59b591fe20ed033b2082f
telemeter git 2c9c76e6 sha256:b987fc70756d1ac60a34d07ca0cd14940f2f5a391915004bd774c83ea7f9413d
thanos git 10ca1d38 sha256:7b21ee22c06885bcbacd4c8539d6a1495d20ba9a3c3e749069a1b582e07fcb14
vsphere-cloud-controller-manager git 25b98d3b sha256:949697979954247cfe7ea6fb7e92e63be34cb9dd76c13fb0605abaf7b7e8c1a9

alibaba-cloud-csi-driver

Bug 2047190: Rebase to v1.1.6 #9
Bug 2029416: UPSTREAM: 572: User credentials provided by CredentialsOperator #7
Bug 2037622: UPSTREAM: 590: Add pvc size to snapshot restore size #8
Full changelog

alibaba-disk-csi-driver-operator

Bug 2043130: alibaba-disk: Add external-snapshotter permissions to patch snapshots #16
Bug 2038934: Add custom CA bundle support #15
Full changelog

alibaba-machine-controllers

Bug 2037209: [Alibaba] refactor for getResourceGroup ID from name #29
Bug 2037209: refactor for AlibabaResourceReference changes #26
Bug 2042715: Update Machine API Operator to include latest machine controller features #27
Bug 2035453: [Alibaba] fix api endpoint #24
Full changelog

aws-ebs-csi-driver

Bug 2050190: Fix build on ARM after rebase #199
Bug 2050190: Rebase v1.5.1 #196
Full changelog

aws-ebs-csi-driver-operator

Bug 2043130: aws-ebs: Add external-snapshotter permissions to patch snapshots #147
Bug 2038934: Add custom CA bundle support #146
Full changelog

aws-machine-controllers

Updating ose-machine-api-provider-aws images to be consistent with ART #13
Bug 2040376: Update map of supported aws instance types #19
Bug 2040504: Ensure IOPS setting is honoured on all supported block device types #18
Full changelog

azure-disk-csi-driver-operator

Bug 2043130: azure-disk: Add external-snapshotter permissions to patch snapshots #41
Bug 2038934: Bump(library-go): to get leader election changes #40
Full changelog

azure-file-csi-driver-operator

Bug 2043130: azure-file: Add external-snapshotter permissions to patch snapshots #24
Bug 2042960: Remove UID, GID from StorageClass asset #23
Bug 2038934: Add custom CA bundle support #22
Full changelog

azure-machine-controllers

Bug 2030488: Requeue create on invalid credentials errors #11
Full changelog

baremetal-installer, installer, installer-artifacts

Bug 2050227: Don’t shortcut OpenStack scraping if quota is unavailable #5602
Bug 2047455: Update custom image os type #5587
Bug 2047255: [Alibaba] fix validation of resource group ID #5584
Bug 2046025: [Alibaba] fix destory exist private zone #5583
Bug 2043003: [Alibaba] fix destroy not exist security group #5580
Bug 2045916: IBMCloud: Stop defaulting to dedicated storage profile #5578
Bug 2043297: bump RHCOS 4.10 bootimage metadata #5577
Bug 2042370: [Alibaba] fix installer index panic #5575
Bug 2042770: [Alibaba] fix resource creation for existing network #5574
Bug 2040143: [Alibaba] remove unsupport regions #5572
Bug 2035720: [Alibaba] support internal publish strategy #5534
Bug 2025868: Check HyperVGenerations for instance type #5509
Bug 2042036: remove options for existing resources which are currently not supported #5568
Bug 2041765: Adjust the startup order of httpd container #5541
Bug 2041750: [Alibaba] fix endpoint error in some regions #5571
Bug 2047258: Read GovCloud from RHCOS stream #5585
Bug 2045927: Add proxy for ironic-agent.service #5569
Bug 2041694: [Alibaba] fix system disk category of bootstrap #5564
Bug 2042655: revert delay of bootstrap control plane teardown for alibaba #5550
Bug 2041319: [Alibaba] fix VSwitch subnets overlap #5566
Bug 2041926: [Alibaba] fix creating public record being skipped #5565
Bug 2023839: Bump Fedora CoreOS to 35.20220116.2.0 #5567
Bug 2038166: openstack: Fix invalid-https-certificate detection #5576
Bug 2037209: update alibaba for provider spec api changes #5562
Bug 2037209: vendor: update openshift/api to latest in preparation for alibaba machine provider changes #5563
Bug 2043731: Add IP outputs for IBM terraform instances #5538
Bug 2037813: [baremetal] networkConfig field now accepts yaml instead of string value #5545
Bug 2042315: Fallback to External IP_OPTIONS when ProvisioningNetwork is Disabled #5548
Bug 2040160: [Alibaba] fix EIP metering method #5547
Bug 2026321: Remove allowed values for nodeVMsize #5532
Bug 2042438: openstack/Dockerfile: add make and gettext #5546
Bug 2033271: [Alibaba] fix deletion of resource group #5536
Bug 2041598: Azure Stack remove CA bundle from CPC #5543
Bug 2017874: Check quota for G and VT instances #5510
Bug 2038166: openstack: Document legacy HTTPS cert validation #5544
Bug 2041361: [Alibaba] fix load balance listener strategy #5540
Bug 2033524: [Alibaba] support for list existing domains #5533
Bug 2035705: Azure: Only attempt to destroy resourcegroups if present #5516
Bug 2039241: [baremetal] use podman secret for image-customization server #5525
Bug 2035454: [alibaba] fix deletion of the OSS bucket #5530
Bug 2039109: Fix image-customization-controller image pull failure #5513
Full changelog

baremetal-operator

Bug 2044496: Update vendor #202
Bug 2044496: Make bmc subscription validator less aggressive #201
Bug 2041765: irmc: change BootInterface to ipxe #200
Bug 2036006: Use integer value in clean steps for HostFirmwareSettings Integer type #199
Bug 2035882: Publish events for all invalid HostFirmwareSettings #198
Full changelog

cli, cli-artifacts, deployer, tools

Bug 1976894: Idling a StatefulSet seems to work however accessing the Services Route does not wake up the application (“Application is not available” error page is returned). #1026
Bug 2039359: Fix adm prune rs orphans #1030
Bug 1972962: Add validation for max-icsp-size flag #851
Bug 1999246: adm catalog mirror should ignore .indexignore files #918
Bug 2042059: bump discovery burst and qps #1033
Bug 2038160: Inform user about inability to schedule a debug pod #1029
Bug 1990014: Throw error when debugging Windows nodes #1028
Full changelog

cloud-credential-operator

Bug 2045591: Fix reconciliation of aws pod identity webhook configuration #447
Bug 2035903: handle resources with feature-gate annotation #444
add unsupported docs for migrating to STS #442
pkg/operator/status: Set an explicit happy reason/message #416
Bug 2037331: Make ccoctl gracefully handle existing gcp workload identity resources #441
update sts docs to reference ccoctl where appropriate #418
Bug 2034484: Library go bump #434
Full changelog

cloud-network-config-controller

Bug 2046296: Fix waitForCompletion on GCP #24
Bug 2044745: Add check on NetworkInterfaceReferenceProperties for Azure #23
Bug 2043802: Fix removal of last AliasIpRange on GCP #20
Bug 2035167: Revert to using UpdateStatus #19
Bug 2035167: fix cloudprivateipconfig sync on delete #17
Bug 2041882: gcp: retrieve project from resources, not from the credentials #18
Bug 2034460: Update Azure Authentication for Different Environments #16
Full changelog

cluster-authentication-operator

Bug 2040521: routeName used as customSecretName #533
Bug 2039670: Sync the library-go #538
Bug 2042038: bump library go #537
Bug 2024841: use latest keycloak for testing #534
Full changelog

cluster-autoscaler

Bug 2045561: revert defaultCAPIGroup constant #220
Bug 2043675: UPSTREAM: <drop>: Ensure ClusterAPI DeleteNodes accounts for out of band changes scale #219
Bug 2043043: Rebase Autoscaler onto upstream release-1.23 branch #218
Updating vertical-pod-autoscaler images to be consistent with ART #216
Full changelog

cluster-baremetal-operator

Bug 2045927: Add proxy for image-customization-controller #240
Bug 2040671: Fix the way the network stack is determined #239
Bug 2041510: Enable webhook for bmceventsubscriptions #237
Bug 2040710: Pluralize BMC subscription CR name in RBAC #235
Full changelog

cluster-cloud-controller-manager-operator

Bug 2048478: [release-4.10] Alibaba should deploy image from release payload #168
Full changelog

cluster-config-operator

Bug 2043709: fix component-base logging flags #230
Bug 2034484: feat: bumped library-go version #227
Full changelog

cluster-csi-snapshot-controller-operator

Bug 2037856: Fix typo in VolumeSnapshotContents RBAC #112
Bug 2039670: Skip deployment of PDBs on the SNO topology #109
Bug 2037856: Update library-go to get leader election updates #110
Bug 2043130: Bump snapshot CRDs #111
Full changelog

cluster-dns-operator

Bug 2043787: Bump to Kubernetes 1.23 and Go 1.17 #311
Full changelog

cluster-etcd-operator

Bug 2053148: [release-4.10] update library-go to get rapid installer pod fixes #738
Bug 2047929: [release-4.10] bump library-go #734
Bug 2043683: Revert “Merge pull request #727 from mfojtik/fix-dual-ip” #730
Full changelog

cluster-image-registry-operator

Bug 2050557: Alibaba: adding permissions for using KMS encryption #753
Bug 2051692: Retry on pruner failures #755
Bug 2048443: Fix panic in finalizer handler #748
Bug 2048117: fix(ibmcos): Resource key validation + update status granularly #746
Bug 2034484: Library go bump #736
Bug 2039170: Change log level for debug messages #743
Full changelog

cluster-ingress-operator

Bug 2043759: Bump to Kubernetes 1.23 #696
Bug 2039339: Upgradeable Condition in Operator and IC status #693
Bug 2039919: NE-542 Router compression E2E test #679
Full changelog

cluster-kube-apiserver-operator

Bug 2053148: [release-4.10] update library-go to get rapid installer pod fixes #1301
Bug 2052339: degraded webhook conditions to errors #1314
Bug 1999771: revert dev cert rotation #1306
Bug 2042049: Delete feature gates removed from k8s.io/kubernetes/pkg/features/kube_features.go #1298
Bug 2034559: alerts: update latency thresholds #1284
Bug 2005901: Sync the library-go #1295
Bug 2037856: bump library go #1294
Full changelog

cluster-kube-controller-manager-operator

Bug 2053148: [release-4.10] update library-go to get rapid installer pod fixes #598
Bug 2052599: [release-4.10] Update to use configmapleases #603
Bug 2048484: allow cluster-policy-controller to fallback to default cert #596
Bug 2042049: Delete feature gates removed from k8s.io/kubernetes/pkg/features/kube_features.go #592
Bug 2005901: Sync library go #591
Bug 2037856: bump library go #590
Bug 2040132: drop –port flag #589
Full changelog

cluster-kube-scheduler-operator

Bug 2053148: [release-4.10] update library-go to get rapid installer pod fixes #408
Bug 2052598: [release-4.10] Update resourcelock to configmapleases #413
Bug 2035986: Replace deprecated annotation #393
Bug 2042049: Delete feature gates removed from k8s.io/kubernetes/pkg/features/kube_features.go #401
Bug 2039414: Update KubeSchedulerConfig to v1beta3(default in 1.23) #395
Bug 2005901: Sync the library-go #397
Bug 2033751: Return Error when trying to use Scheduler Policy #390
Bug 2040132: drop –port flag #398
Full changelog

cluster-machine-approver

Bug 2028019: Account for large scale simultaneous renewal on UPI clusters #152
Full changelog

cluster-monitoring-operator

Mon 2172: Add clusterrole for editing alertmanagerconfigs #1545
Remove UI access to AlertManager #1529
Remove UI access from the Thanos routes #1512
Bug 2038419: Bump Grafana to 8.3.4 and handle datasource migration #1543
Bug 2030347: kube-state-metrics exposes metrics about resource annotations #1544
Bug 2026489: Add runbook url for ThanosRuleRuleEvaluationLatencyHigh alert #1542
Bug 2037891: Reverting the secureJsonData change for the grafana password #1539
Bug 2039119: assets: let CVO manage the CMO Service resource #1537
Reconcile AlertManagerConfig in UWM from platform Prometheus #1527
manifests: Support thanos query requst logging via CM #1513
Full changelog

cluster-network-operator

Bug 2051639: The Whereabouts ip-reconciler should use the internal load balancer and host network [backport 4.10] #1305
Bug 2048413: Fix bond cni source directory path #1298
Bug 2041546: ovn-kubernetes: set RAFT election timer at RAFT cluster creation time #1282
Bug 2034484: Upgrade library-go version #1247
Bug 2042796: whereabouts, reconciler: disable retries on failure #1290
Bug 2039345: Verify against mininimal IPv6 MTU value for clusters with IPv6 networks #1276
Bug 2034155: Adds back –disable-snat-multiple-gws #1254
Bug 2039321: SDN: Expose controller metrics for collection #1250
clean up OWNERS #1287
Bug 2041989: no CredentialsRequests in ibm-cloud-managed #1280
Bug 2035459: modify cluster-network-features for OpenshiftSDN #1251
Bug 1896533: Nonexistent Namespaces Degradation logging message #1128
Bug 2038732: Add egress* patch credentials for ovnkube-master #1285
Bug 2041329: cncc: add serviceAccountNames to CredentialsRequests #1283
Bug 2010663: OVN-K alerts: conform to monitoring team style guide #1246
Bug 2021191: Project admins should be able to list net-attach-defs in their namespaces #1226
BUG 2034413: cncc: create Cloud CredentialsRequest in /manifests #1277
Full changelog

cluster-openshift-apiserver-operator

Bug 2039670: Create the PDB dynamically so it does not get created on the SNO topology #489
Bug 2041541: bump library go #490
Full changelog

cluster-openshift-controller-manager-operator

Bug 2042587: Fix Conflict Error in Operator Tests #235
Full changelog

cluster-samples-operator

Bug 2027745: Allowing ImageStream creation when config registry empty #406
Bug 2033720: Synching SSO library #411
upd rhel7 Dockerfile in case still used for rhel7 worker nodes #410
Bug 2033720: Bump k8 dependencies to v0.23.1 #409
Bug 2033720: Library synchronization for OCP 4.10 #408
Bug 2027745: Move openshift build-machinery-go dependency #407
Full changelog

cluster-storage-operator

Bug 2044481: update ClusterOperator relatedObjects to collect sharedresource CRD instances #257
Bug 2047025: Add “patch” permissions to Alibaba CSI driver operator #259
Bug 2045112: Add leases rbac for vsphere-problem-detector #258
Bug 2043130: Update CSI sidecars to the latest release for 4.10 #256
Bug 2037856: Update library-go to get leader election updates #255
Bug 2040880: Do not replace unknown condition with true when we union conditions #254
Bug 1961317: Add operator’s ClusterRoleBinding to RelatedObjects #251
Full changelog

cluster-version-operator

Bug 2009845: pkg/cvo/sync_worker: Log transition to updating #730
Bug 2027342: Add notification for certificate changes #726
Bug 2009845: pkg/cvo/sync_worker: Do not cancel sync workers on install-time target-version change #729
Bug 2009845: Respect overrides changes during install (second round) #728
Revert “Bug 2009845: Respect overrides changes during install” #727
Full changelog

console

Bug 2052644: Fix auth redirect loop caused by duplicate state-token cookie #11018
Bug 2048048: fix width of dropdowns in the userpreferences applications tab #10972
Bug 2048050: fix topology list view #10973
Bug 2048046: Fix that new route annotations doesn’t work on Knative Services #10970
Bug 2049043: Dont assume its a pvc #10989
Bug 2048891: Remove depracated v2v resources from plugin config #10985
Bug 2048598: fix web terminal resize layout issue #10981
Updating openshift-enterprise-console images to be consistent with ART #10424
Bug 2046597: Monitoring targets: Fix handling of duplicate service monitors #10942
Bug 2046601: Createvm crash on null #10956
Add QuickStarts cta to create ProjectHelmChartRepository in the helm catalog description text #10904
set helm feature flag for project helm repositories #10860
Bug 2030305: Fix that primer export download toast was not shown #10800
Bug 2009189: fix annotations on updating deployment #10573
Bug 2047317: Update doc helm OWNERS #10852
Bug 2039534: Migrate project dashboard tests to Cypress #10834
Bug 2046517: Recommendations notification header shows when there isn’t any recommendations #10943
Gherkin and automation for helm chart registry to be namespace scoped #10920
Implement multicluster console tech preview #10900
Add a new devfile telemetry event #10876
Bug 2023675: Add warning alert when installing operator to non suggested namespace #10491
CONSOLE-2964: Update ts-node to v10.2.1 #10014
Bug 2037203: Add a scrollable legend to Running VMs graph #10928
Bug 2042274: Storage API should be used when upload PVC #10939
Bug 2044724: Remove namespace column on VM list page when a project is selected #10937
Bug 2040535: Added support for customized wizard #10921
Bug 2015356: Different status shows on VM #10922
Bug 2035602: [e2e][automation] add tests for Virtualization Overview cards #10760
Bug 2045849: chore(i18n): update translations #10887
Bug 2039619: - [AWS] In tree provisioner storageclass aws disk type should contain ‘gp3’ and csi provisioner storageclass default aws disk type should be ‘gp3’ #10926
Bug 2044201: Support for DATA_SOURCE_NAME and DATA_SOURCE_NAMESPACE fix #10924
Bug 2025821: Make “Network Attachment Definitions” available to project-admin #10906
Bug 2044717: improve test situation for upstream #10902
Bug 2044704: Revert “Monitoring: Add runbook URLs to alert and rule details pages” #10919
CONSOLE-2280: show support level #10551
Bug 2044201: Support for DATA_SOURCE_NAME and DATA_SOURCE_NAMESPACE #10912
Bug 2042851: Create template from SAP HANA template flow #10899
Bug 2037237: Add “This is a CD-ROM boot source” checkbox to customize wizard #10896
disable helm on multi cluster environment #10916
Bug 2041671: Redirect to list after template deletion #10917
Add user preferences to guided tour #10905
Bug 2042619: Avoid runtime error when no CSVs #10884
CCXDEV-7039: make severity links clickable in Insights Advisor widget #10875
Bug 2037772: Use correct caps in ‘Service name’ & ‘System name ’ #10785
Bug 1986819: fix string typos for hot-plug disks #9878
CONSOLE-2360: Add debug terminal for pods #9578
Bug 2041093: Changed validation of adding file content from not empty to not contain parsing errors #10895
Add KamletBinding Visualization #10892
update version of quick-start library to latest #10840
Bug 2042395: Add prerequisites for active health checks test #10880
Include the namespace-scoped Helm Chart Repositories in the dev catalog #10885
Bug 2043117: Make recommended operator links internal #10898
Bug 2026383: Monitoring: Fix JS error when dashboard JSON cannot be parsed #10890
Bug 2030240: Hide virtualization overview for non-admin users #10881
Bug 2043064: Update patternfly-topology to include latest changes and improve topology performance a bit #10879
Bug 2039315: Filter superseded helm secrets and fix firehose to support partial metadata #10812
Bug 2043068: Show total text even if current utilization is 0 #10897
Bug 2042829: Topology performance: Do not fetch HPA for each Deployment (Pod Ring) #10894
Bug 2036989: Prevent route external link icon and copy-to-clipboard icon from wrapping separately from its associated inline text. #10865
Bug 2039868: Enhance Insights widget empty states #10826
Bug 2041475: Add function names to components which are wrapped in memo to get their name in the react dev tools #10858
Bug 2033098: Conjunction in the ProgressiveListFooter is now translatable #10790
Bug 2039618: Add validations to SAP HANA #10866
Bug 2031797: Correct order and text of Boot source type input #10798
Bug 2038772: Monitoring: Fix handling of ServiceMonitor’s matchExpressions #10877
ODC-6455: Remove old labels from add page tests #10864
Bug 2041492: Fix spacing between resource items in inventory card #10862
ODC-6453: Allow multiple namespaces to be deleted as part of cleanup #10859
Gherkin and automation for workload sidebar entry for pipeline triggers #10837
Bug 2042567: elaborate on CodeReady in readme #10835
Mock all the remaining github requests in e2e suite #10768
Gherkin and automation for specifying a name for service binding connector #10723
Bug 2042649: Bump helm to v3.7.1 #10469
Bug 2042382: kubevirt: only run smoke tests in CI #10878
Bug 2038879: Check if name label exists before comparing #10874
Bug 2041763: Fix handling of the defaultSortField prop for tables #10868
adds support for host app to pass configurations for apiDiscovery , appInternalFetch #10707
Bug 1986302: Check rbac before polling for rules silences #10725
Bug 2040616: - rolebindings page doesn’t load for normal users #10867
Bug 2040783: Show the new resource name, esp. when using generateName on the import status page #10850
Bug 2040653: Fix topology sidebar warns that another component is updated while rendering #10842
Bug 2015420: Add VMs resource to project’s intentory card #10839
Integrate PatternFly log viewer extension into Pods and Nodes #10486
Bug 2008235: Fix to fetch imageStreamTag on reload in edit-deployment form #10771
Bug 2040782: Fix that import YAML page blocks input with more then one generateName attributes #10849
Bug 2040655: Fix that user settings update fails when selecting application in topology sidebar #10843
Bug 2013127: allow catalog categories and cards to open in new tab #10853
Bug 2039798: contextual binding should create service binding connector #10832
Bug 2039065: re-enable Bulk Import e2e test and increase wait #10814
Bug 2037241: Default cache ns store ttl to 0 #10861
Bug 2039743: Fix react “missing key” warning when open operator hub detail page (and maybe others as well) #10822
Bug 2011368: fix PipelineRun visualization tooltip to show duration #10806
Bug 1982662: Fix localization issues in Add Storage page #10054
Bug 2040661: Fix different react warnings when leaving topology #10844
Bug 2039619: - [AWS] In tree provisioner storageclass aws disk type should contain ‘gp3’ and csi provisioner storageclass default aws disk type should be ‘gp3’ #10845
Bug 2038772: Monitoring: Handle service monitors with undefined matchLabels #10854
Bug 2039776: Monitoring: show a error message if wrong dashboard name is passed to the URL #10851
Bug 2039770: Monitoring: use namespace to detect the active perspective instead of useActivePerspective hook #10836
Bug 2034362: Update description of disk interface #10825
Bug 2041204: Fix templates link in inventory card #10848
Bug 2038034: non-privileged user cannot see auto-update boot source #10803
helm: support namespaced helm repository for helm API #10467
Bug 2035703: - Roles -> RoleBindings tab doesn’t show RoleBindings correctly #10846
Bug 2040150: Make changes to HPCS KMS component #10833
Bug 2039057: Adjust kind column to target width in API explorer page #10811
migrate knative plugin models to resource metadata dynamic plugin #10330
Bug 2027563: e2e tests wait for add forms to load #10654
Bug 2014420: dont crash topology page #10272
Bug 2014464: Fix navigation spacing in dev (generic) perspective #10830
Bug 2039781: OBC navItem hidden for non-cluster admin #10824
Bug 2039678: Check if ‘auths’ key when switching between create image secret subforms #10821
Bug 2039244: Add null checks in ActionMenu to fix helm history page crash #10813
Bug 2027524: delete channel and broker when deleting an application #10787
Bug 2034190: unable to add new VirtIO disks to VMs #10748
Bug 2035146: Removed not useful error #10819
Bug 2039056: Fix alignment of the schema breadcrumbs … #10831
Bug 2037664: Override the PatternFly default vertical alignment value within tables to correctly align cell contents. #10829
Full changelog

console-operator

Add QS for installing namespeced Helm Chart Repos #631
Implement multicluster tech preview #630
Add Jon Jackson to approvers list #625
Bug 2041605: Fix plugin proxy path #628
CONSOLE-3005: Provide alias for dynamic plugin’s proxy #613
Full changelog

container-networking-plugins

Updating ose-containernetworking-plugins images to be consistent with ART #52
Full changelog

coredns

Bug 2043801: Merge 1.8.7 #70
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

Bug 2036569: Merge upstream bump to k8s 1.23 #98
Full changelog

csi-driver-manila-operator

Bug 2043130: csi-driver-manila: Add external-snapshotter permissions to patch snapshots #136
Bug 2038934: Add custom CA bundle support #134
Full changelog

csi-driver-shared-resource

add custom must-gather image for ‘oc adm must-gather’ #85
BUILD-400: feature file for rhel entitlement using shared secret #86
BUILD-401: add an openshift build using entitlements via shared resources example #83
BUILD-256: Conformance Tests for Shared Resource CSI Driver #62
BUILD-381: require CSI Volumes using the Shared Resources driver to be specified as readOnly == true #84
Full changelog

csi-external-attacher

Bug 2043130: Rebase to v3.4.0 for OCP 4.10 #37
Full changelog

csi-external-provisioner

Bug 2043130: Rebase to v3.1.0 for OCP 4.10 #49
Full changelog

csi-external-resizer

Bug 2043130: Rebase resizer v1.4.0 #127
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

Bug 2043130: Update CSI sidecars to the latest release for 4.10 #66
Full changelog

docker-builder

Bug 2044244: bump(github.com/containers/buildah) to v1.22.4 #281
Full changelog

egress-router-cni

Updating egress-router-cni images to be consistent with ART #58
Full changelog

gcp-cloud-controller-manager

Bug 2041509: Rebase CCM onto latest changes with K8s 1.23 updates #11
Full changelog

gcp-pd-csi-driver-operator

Bug 2043130: gcp-pd: Add external-snapshotter permissions to patch snapshots #44
Bug 2038934: Bump(library-go): to get leader election changes #43
Full changelog

grafana

Bug 2038419: Bump grafana to v8.3.4 #81
Bug 2038419: Bump grafana to v8.3.3 #80
Full changelog

haproxy-router

Bug 2043780: Bump to Kubernetes 1.23 #370
Full changelog

hyperkube, pod

Bug 2049890: UPSTREAM <carry>: Remove pod warning annotation when workload partitioning is disabled #1164
Bug 2050250: Upstream 107900 static pod fix #1169
Bug 2050247: UPSTREAM: 107902: Merge pull request #107902 from xueqzhan/automated-… #1167
Bug 2043806: UPSTREAM 107564: kube-apiserver integration test: allow IPs with leading zeros on the API #1133
Bug 2044347: bump to k8s 1.23.3 #1145
Bug 2039539: Revert “UPSTREAM: <drop>: revert upstream PR 106306” #1143
Bug 2041583: UPSTREAM: <carry>: set correctly static pods CPUs when workload partitioning is disabled #1136
Bug 2040533: UPSTREAM: 107695: kubelet: fix podstatus not containing pod full name #1140
Bug 2039539: UPSTREAM: <drop>: revert upstream PR 106306 #1130
Bug 2022824: Fix the leak of vSphere client sessions #1104
Bug 2042169: UPSTREAM: <carry>: remove egressnetworkpolicies from gc ignored resources #1123
Bug 2040793: Fix ordering issues with snapshot e2e #1119
Bug 2038968: Restore upstream feature gates #1112
Bug 2004542: UPSTREAM: 89885: SQUASH: Retry fetching clouds.conf #1099
Bug 2041641: Backport k8s.io/utils fix for a memory leak within the inotify utilities #1122
Bug 2042493: UPSTREAM 107564: kube-apiserver integration test: allow IPs with leading zeros on the API #1124
Bug 2039414: UPSTREAM: <carry>: allows for switching KS to talk to Kube API over localhost-squash to other #1121
Bug 2042493: UPSTREAM: <carry>: Fix conformance and serial tests by stopping node cordoning #1129
Bug 1933144: hardens the aggregated API e2e tests in an HA setup #1114
Bug 2001442: empty termination.log file for the kube-apiserver has too permissive mode #1096
Bug 2034705: UPSTREAM 107136: Don’t log vSphere configuration data in storage e2e tests #1098
Bug 2033751: fix -rt builds and copy extensions into resulting image #1106
Full changelog

ibm-vpc-block-csi-driver-operator

Bug 2052458: IBMCloud: Add critical spec to ctlr #25
Bug 2049003: IBMCloud: Add critical spec to driver daemonset #23
Bug 2041441: Provision volume with size 3000Gi even if sizeRange: ‘[1… #20
Bug 2044248: Always apply fsGroup to volumes #19
Bug 2038934: Add custom CA bundle support #18
Full changelog

ibmcloud-machine-controllers

Bug 2042265: Fix machine providerID format #17
Bug 2042711: [OCPCLOUD-1268] Migrate Machine API to openshift/api #16
Bug 2036993: update repo for golang 1.17 #14
Full changelog

image-customization-controller

Bug 2045927: Add proxy for ironic-agent.service #33
Full changelog

insights-operator

Minor gathering docs update (#575) #575
Remove “InsightsOperatorPullingSCA” TP feature check (#574) #574
info alert when the SCA is not available (#565) #565
Bump k8s & OpenShift versions (#572) #572
feat: conditional log gathers into a single gather and PrometheusOperatorSyncFailed (#563) #563
Remove unnecessary division into important and failable gatherers (#567) #567
Full changelog

ironic

Bug 2043533: Update ironic and inspector to latest bugfix release #251
Bug 2043556: Update ci-operator config #252
Full changelog

ironic-agent

Bug 2043556: Add ci-operator config #34
Bug 2034527: Allow setting IP options kernel args on install #31
Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

Bug 2041888: bump openshift-sync to 1.0.53 #1375
Bug 2044942: Jenkins Fixes for CVE-2022-20617 and CVE-2022-20612 #1368
testing sidecar pattern for jenkins pod template #1364
Full changelog

kube-proxy, sdn

Bug 2043802: Fix CloudPrivateIPConfig enqueueing during egressip reassignment #395
Bug 2038793: Use the kubeClient instead of the informer cache to fetch nodes for egress IP validation. #389
Bug 2039294: SDN controller metrics cannot be scraped by prometheus #388
Bug 2035439: Use cloud egress network config for verifying egress IP in cloud environment #387
Full changelog

machine-api-operator

Bug 2041971: Bump library-go to fix mutating webhook reconcile #981
Bug 2042366: Update openshift/api to include list-map fixes for lifecycle hooks #979
Bug 2040620: Rename MAPO image #978
Bug 1918005: Use known vSphere cluster to uniquely identify networks. #961
Full changelog

machine-config-operator

Bug 2048836: Use ip command to check for ipv6 addresses #2938
Bug 2044808: mcd pull service: use cp instead of cat to copy MCD on host #2925
Bug 2045866: Set proper InvolvedObject when using library-go EventRecorder #2893
Bug 2046683: Ensure correct providerID format for Alibaba nodes #2931
Bug 1999556: annotate rendered config with OCP version #2918
Bug 2040671: Configure-ovs: Ensure DHCP finishes for both address families #2929
Bug 2038240: Error if files have special bits set #2910
Bug 2041889: Explicitly configure NetworkManager keyfile #2917
Bug 1916169: storeCurrentConfigOnDisk after os changes #2922
Bug 2042655: Alibaba hairpin #2919
Bug 2035199: add support for IPv6 and multiple routes to the same destination when setting MTU on routes during MTU migration #2914
Bug 2036113: configure-ovs: cleanup leftovers from previous run #2907
Bug 2035326: ovs-configuration - use lower than NM default ethernet route metric #2898
shiftstack: Update OWNERS #2916
Bug 2028590: Remove unneeded crio.service.d drop-in #2858
Bug 2039541: Fix duplicate prepender entries in resolv.conf #2908
Full changelog

multus-whereabouts-ipam-cni

Bug 2052062: client-go bump to v1.22 [backport 4.10] #83
Full changelog

must-gather

Bug 2041087: Revert MetalLB speaker component label #280
Full changelog

network-interface-bond-cni

Bug 2030677: Allow setting bond MTU (#25) #29
Full changelog

oauth-apiserver

Bug 2049156: fix printers to avoid panic from DeepCopy #73
Full changelog

oauth-proxy

Bug 2026860: ocp provider: don’t fail client creation if oauth-server cert is not present #238
Full changelog

openshift-apiserver

Bug 2047927: fix panic from printer #278
Bug 2047927: [release-4.10] fix panic from printer #273
Bug 2032589: Make OriginImageMutators aware of origin objects #268
Full changelog

openstack-cinder-csi-driver-operator

Bug 2043130: openstack-cinder: Add external-snapshotter permissions to patch snapshots #67
Bug 2038934: Add custom CA bundle support #66
Full changelog

operator-lifecycle-manager, operator-registry

Bug 2034319: Sync constraint changes #248
Bug 2026343: Address Invalid Address in GRPC Catalogs (#2499) #240
Remove benluddy from approvers. #247
Add perdasilva to OWNERS #241
Bug 2003164: Do not modify object from the lister cache (#2562) #242
Full changelog

operator-marketplace

Bug 1927478: Add catalog source pod spec overrides #457
Full changelog

ovirt-csi-driver

Updating ose-ovirt-csi-driver images to be consistent with ART #98
Full changelog

ovirt-csi-driver-operator

Bug 2043130: ovirt: Add external-snapshotter permissions to patch snapshots #80
Full changelog

ovn-kubernetes

Bug 2031926: Shared gateway: Modification of ClusterIPs shall trigger svc update #924
Bug 2042001: Adds wait method for ovsdb operations that created named objects #934
Bug 2044303: Fix update of CloudPrivateIPConfig #923
Bug 2046297: libovsdb: give connects more time to process than normal transactions #931
Bug 2044680: libovsdb performance and resource consumption fixes #927
Bug 2017650: EF: Pull up switch names from cache #908
Bug 2025467: ETP=local,SGW: Add DNAT rule towards 169.254.169.3 #907
Bug 2043961: Fix pod-creation-retry #926
Bug 2040540: Fix String formatting error #904
Clean up OWNERS a bit #919
Bug 2039880: Metrics: Increase log level for CP recorder #899
Bug 2039099: EgressIP fixes for 4.10 #917
Bug 2032998: perf/scale backports #911
Bug 2034577: Set l3GWConfig.mode correctly #909
Bug 2034155: Make egressIPs compatible with ICNI #915
Bug 2029742: egressip: fix usage of clientModel doAfter #910
Bug 2041830: Fix panic in Hybrid Overlay #913
Bug 2039698: Hacky way of doing ITP:preferLocal for openshift-dns:default #896
Full changelog

powervs-machine-controllers

Updated the package module name #2
Synch repo cluster-api-provider-powervs with machine-api-provider-powervs #1
Full changelog

prometheus-config-reloader, prometheus-operator

Bug 2030539: Address race condition in recreate flow for statefulset #152
Full changelog

tests

Bug 2053314: [release-4.10] bug 2053314: requestheader test must wait for authentication operator to settle after config update #26838
Bug 2053307: allow inexact matches for disruption data #26836
Bug 2052058: Break out test for OSUpdateStaged event with no OSUpdateStarted #26830
Bug 2052035: [release-4.10] add job type key to the error we track for statistical jobs #26825
Bug 2050247: Update k8s vendoring #26819
Bug 1825034: IBMCloud: Concurrent CRB create #26814
Bug 2050370: update p99 values for disruption and alerts #26816
don’t double report early alert failures #26799
Bug 2047975: Skip some HAProxy tests on FIPS #26802
add more frequently failing loki alerts to the allow-list #26788
Bug 2039539: Allow apiserver burn rate alert to fire in CI #26748
Revert “add support for build csi volume source” #26790
Flake instead of fail the timely OSUpdateStaged test on metal and ovirt. #26789
Bug 2043042: Additional checks for requestheaders.go #26777
Bug 2045590: Adding new cloud provider e2e for alibabacloud #26782
use real alert data to determine flake and failure timeframes for alerts #26781
Bug 2040793: Fix ordering issues with snapshot e2e #26778
Bug 2044210: [baremetal] remove wait condition when deleting extraworkers #26774
Bug 2034285: test/extended: re-enable API data in etcd test #26768
Bug 2038481: Flake failed sandboxes from bug in new guard pods #26776
adds a synthetic test for checking if the pod.spec.nodeName field is immutable #26772
storage operator can go upgradeable=unknown if vsphere is unreachable #26773
Bug 2035534: Baremetal skip inspection #26681
Bug 2037075: Verify Builds with CSI Volume Sources #26646
allow loki target to be down #26771
Bug 2033720: sync imagestreams #26750
loki moved namespaces, so we have to move to match #26769
Bug 2005901: Allow KA guard probe to fail as designed #26766
update disruption times and shift to p99 #26767
Bug 2033751: Rebase 1.23.0 #26753
Add test for OS updates being staged within 5-10m. #26759
Bug 1931594: add one more timeout condition for –request-timeout test #26756
separate prometheus watch alerts #26762
Alter junit test suite names for jobs with multiple junit xmls. #26755
split watchdog test into its own test #26760
allow promtail restarts as designed #26761
make it easy to create multiple flavors of interval charts #26757
Bug 2040741: Allow baremetal tests to run on multiple platforms #26660
Bug 2038389: Fix vsphere testing workarounds #26737
allow burn budget to flake until kube-apiserver team finds and fixes it #26747
for upgrades, skip alerts with individual invariant tests #26746
Display ErrImagePull messages. #26745
Record zero for known alerts #26744
stop flaking on disruption because we always produce data for analysis #26735
separate out more alerts into specific tests #26743
watch specific alerts for pending and firing #26741
allow wardle aggregated apiservers to be down pending bug #26742
use route to access prometheus instead of exec pods. #26740
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

Bug 2031045: Don’t download binaries at build time #31
Bug 2031045: Update to upstream v2.4.1 #30
Full changelog

vsphere-csi-driver-operator

Bug 2047779: Never degrade cluster on storage policy syncResult #72
Bug 2043130: vmware-vsphere: Add external-snapshotter permissions to patch snapshots #71
Bug 2043651: Fix bug with nextCheck not being changed correctly #70
Bug 2038934: Add custom CA bundle support #69
Bug 2040880: Degrade the OCP cluster if driver is found #68
Bug 2040880: Mark cluster upgradeable to be unknown when we can’t connect to vcenter #67
Full changelog

vsphere-problem-detector

Bug 2052609: Dont forget to register metrics before emitting #74
Bug 2037856: Update library-go to get leader election updates #71
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github